Cross-ecosystem package lookup (deps.dev): resolved deps + advisories API

Cross-ecosystem package intelligence via deps.dev for npm/pypi/cargo/go/maven/nuget/rubygems in ONE normalized shape: resolved version, publish date, license set, source repo/homepage, deprecation, the fully-RESOLVED transitive dependency graph count (direct + transitive), security advisory keys (GHSA/CVE), total version count, and a maintenance verdict. The MORE no single registry exposes: a resolved transitive dep count + advisory join across languages. Answers 'how many transitive deps does this version pull in?', 'does this package version have known advisories?', 'one schema for any ecosystem'.

Price$0.01per request

MethodPOST

Route/v1/dev/deps-dev-lookup

StatusLive

MIME typeapplication/json

Rate limit60/minute

Cache3600s public

devdeps-devcross-ecosystemdependenciesadvisoriestransitivelicensesupply-chain

API URLhttps://x402.hexl.dev/v1/dev/deps-dev-lookup

Integration docs

Example request

{
  "system": "npm",
  "name": "lodash",
  "version": "4.17.20"
}

Example response

{
  "ecosystem": "npm",
  "name": "lodash",
  "version": "4.17.20",
  "isDefaultVersion": false,
  "publishedAt": "2020-08-13T16:53:54Z",
  "deprecated": false,
  "deprecatedReason": null,
  "licenses": [
    "MIT"
  ],
  "repository": "git+https://github.com/lodash/lodash.git",
  "homepage": "https://lodash.com/",
  "dependencyCount": {
    "direct": 0,
    "transitive": 0,
    "total": 0
  },
  "directDependencies": [],
  "advisoryCount": 5,
  "advisories": [
    "GHSA-29mw-wpgm-hmr9",
    "GHSA-35jh-r3h4-6jhm",
    "GHSA-f23m-r3pf-42rh",
    "GHSA-r5fr-rjxr-66jc",
    "GHSA-xxjr-mmjv-4gpg"
  ],
  "totalVersions": 117,
  "maintenance": {
    "verdict": "abandoned",
    "score": 20,
    "daysSinceRelease": 2121,
    "reasons": [
      "Last release 2121d ago (> 2 years) — likely unmaintained.",
      "117 releases — long publish history."
    ]
  }
}

Input schema

{
  "type": "object",
  "required": [
    "system",
    "name"
  ],
  "properties": {
    "system": {
      "type": "string",
      "enum": [
        "npm",
        "pypi",
        "cargo",
        "go",
        "maven",
        "nuget",
        "rubygems"
      ],
      "description": "Ecosystem."
    },
    "name": {
      "type": "string",
      "description": "Package name (for maven use 'group:artifact')."
    },
    "version": {
      "type": "string",
      "description": "Optional specific version; defaults to the registry default/latest."
    }
  }
}

Output schema

{
  "type": "object",
  "additionalProperties": true
}